We collect your email, name, and the subscription data you enter. If you sign in with Google, we receive your Google email and basic profile. We also record basic product analytics — page views and funnel events tied to a random visitor ID stored in your browser — to understand how the product is used. Automatic Gmail scanning is not currently available.
We never sell your data. We share the minimum necessary with the service providers that run Subnope: Stripe (payments), Resend (email delivery), and Google (Sign in with Google, and Google Analytics where enabled). We don’t share your vault contents, logins, or letters with any of them.
Your vault — saved logins, your legacy letter, and notes — is encrypted at rest. Because the whole point of Subnope is that the guardian you choose can actually log in and cancel, our server can decrypt this data — but only to deliver it to that guardian, and only after a handover you set up has been triggered. We don’t access it in normal operation, and we never sell or share it.
Delete your account anytime from Settings → Data & Privacy. Deletion is immediate and permanent.